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Claims 

What is claimed is: 

1 1 . A method for accelerated scanning, comprising: 

2 (a) identifying a file access pattern associated with data; 

3 (b) reading the data based on the file access pattern; and 

4 (c) performing a virus scan on the data. 

The method as recited in claim 1, wherein if it is determined that the data does 
not have the associated file access pattern, the data is read and a file access 
pattern associated with the file is generated and stored. 

The method as recited in claim 1, wherein if it is determined that the data does 
not have the associated file access pattern, the data is read and the virus scan is 
performed, after which it is determined whether the virus scan was slower than a 
predetermined amount. 

The method as recited in claim 3, wherein the file access pattern is conditionally 
generated based on whether the virus scan was slower than the predetermined 
amount. 

The method as recited in claim 1, wherein the file access pattern includes a file 
location. 

The method as recited in claim 1, wherein the file access pattern includes a data 
amount. 
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7. The method as recited in claim 1 , wherein the data is read and scanned by 
executing a first thread of operation for reading the data and a second thread of 
operation for scanning the data. 

8. The method as recited in claim 7, wherein the first thread of operation includes 
retrieving the file access pattern, reading the data based on the file access 
pattern, and caching the data. 

9. The method as recited in claim 8, wherein the second thread of operation 
includes determining whether the file access pattern is valid, and reading the 
data from the cache if it is determined that the file access pattern is valid. 

1 0. The method as recited in claim 8, wherein the second thread of operation 
includes determining whether the data is available for being read from the cache, 
and reading the data if the data is available for being read from the cache. 

1 1 . The method as recited in claim 1 , and further comprising determining whether 
the file access pattern is invalid. 

1 2. The method as recited in claim 1 1 , and further comprising deleting the file 
access pattern if the file access pattern is determined to be invalid. 

13. The method as recited in claim 12, and further comprising reading the data and 
generating a file access pattern associated with the file if the file access pattern is 
deleted. 

1 4. A computer program product for accelerated scanning, comprising: 

(a) computer code for identifying a file access pattern associated with data; 
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(b) computer code for reading the data based on the file access pattern; and 

(c) computer code for performing a virus scan on the data. 

1 5 . The computer program product as recited in claim 1 4, wherein if it is determined 
that the data does not have the associated file access pattern, the data is read and 
a file access pattern associated with the file is generated and stored. 

16. The computer program product as recited in claim 14, wherein if it is determined 
that the data does not have the associated file access pattern, the data is read and 
the virus scan is performed, after which it is determined whether the virus scan 
was slower than a predetermined amount. 

17. The computer program product as recited in claim 16, wherein the file access 
pattern is conditionally generated based on whether the virus scan was slower 
than the predetermined amount. 

18. The computer program product as recited in claim 14, wherein the file access 
pattern includes a file location. 

19. The computer program product as recited in claim 14, wherein the file access 
pattern includes a data amount. 

20. The computer program product as recited in claim 14, wherein the data is read 
and scanned by executing a first thread of operation for reading the data and a 
second thread of operation for scanning the data. 
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1 21 . The computer program product as recited in claim 20, wherein the first thread of 

2 operation includes retrieving the file access pattern, reading the data based on 

3 the file access pattern, and caching the data. 

1 22. The computer program product as recited in claim 2 1 , wherein the second thread 

2 of operation includes determining whether the file access pattern is valid, and 

3 reading the data from the cache if it is determined that the file access pattern is 

4 valid. 

1 23 . The computer program product as recited in claim 2 1 , wherein the second thread 

2 of operation includes determining whether the data is available for being read 

3 from the cache, and reading the data if the data is available for being read from 

4 the cache. 

1 24. The computer program product as recited in claim 14, and further comprising 

2 computer code for determining whether the file access pattern is invalid. 

1 25. The computer program product as recited in claim 24, and further comprising 

2 computer code for deleting the file access pattern if the file access pattern is 

3 determined to be invalid. 

1 26. The computer program product as recited in claim 25, and further comprising 

2 computer code for reading the data and generating a file access pattern 

3 associated with the file if the file access pattern is deleted. 

1 27. A system for accelerated scanning, comprising: 

2 (a) logic for identifying a file access pattern associated with data; 

3 (b) logic for reading the data based on the file access pattern; and 
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(c) logic for performing a scan on the data. 

28. A method for accelerated scanning, comprising: 

(a) reading data during a first thread of operation, wherein the data is cached during 
the first thread of operation; and 

(b) performing a virus scan on the data during a second thread of operation running 
in parallel with the first thread of operation, wherein the data is read from the 
cache during the second thread of operation. 

29. A method for accelerated scanning, comprising: 

(a) identifying data on a hard disk to be scanned for viruses; 

(b) reading the data from the hard disk; and 

(c) caching the scanned data for accelerating a virus scanning process involving the 
data. 

30. A method for reducing delay associated with reading data from memory during a 
scan, comprising: 

(a) initiating a scan; 

(b) identifying a file to be scanned during the scan; 

(c) determining whether the file has a file access pattern associated therewith; 

(d) if it is determined that the file does not have the associated file access pattern, 

(i) reading the data from the file, 

(ii) scanning the data, 

(iii) identifying a file access pattern associated with the file, and 

(iv) storing the file access pattern; 

(e) if it is determined that the file has the associated file access pattern, executing a 
first thread of operation and a second thread of operation, the first thread of 
operation including: 



NAI1P049/01.250.01 



-20- 



14 


(i) 


retrieving the file access pattern, 


15 


(ii) 


identifying a file location and data amount of the file access pattern, 


16 


(iii) 


reading data from the file associated with the identified file location and 


17 




data amount, 


18 


(iv) 


caching the data, and 


19 


(iv) 


repeating (ii)-(iv); and 


20 (f) 


said 


second thread of operation including: 


21 


(i) 


determining whether the file location and data amount are valid, 


22 


00 


deleting at least a portion of the file access pattern associated with the 


23 




file if it is detennined that the file location and data amount are not valid, 


24 


(iii) 


determining whether the data is available for being read from the cache, 


25 


(iv) 


reading the data from the cache if it is determined that the file location 


26 




and data amount are valid, and the data is available for being read from 


27 




the cache, and 


28 


(v) 


scanning the data. 
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